Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/08a7bded-2d5d-3c43-82c3-cf8cfc6bb171.roa
File:                     08a7bded-2d5d-3c43-82c3-cf8cfc6bb171.roa (raw, json)
Hash identifier:          yozLXnL86yTHLpGmg9Ed/Q10tozzzg2eYz8OrKwUWH8=
Subject key identifier:   07:40:E5:CE:62:72:FB:8F:33:84:5C:20:93:3B:8D:2F:6F:85:3A:99
Certificate issuer:       /CN=0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62
Certificate serial:       010D0C9F4328584A454037F24D898B209381CD00
Authority key identifier: 4D:B5:2F:46:B2:3B:D1:0C:89:9E:88:83:77:12:B0:7E:2B:24:EA:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/08a7bded-2d5d-3c43-82c3-cf8cfc6bb171.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     16437
IP address blocks:        23.188.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:37:f2:4d:89:8b:20:93:81:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=b87aaa7d-689a-4778-96e9-453dba7af88d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3e:30:21:c8:89:2d:64:05:b1:20:58:9d:19:
                    b7:16:54:bf:4b:db:54:34:6d:16:d5:2a:35:e6:55:
                    88:7d:3b:f7:c7:d3:ba:d2:c1:1f:49:9f:f5:bd:25:
                    99:e7:09:95:9d:d6:a7:5f:13:c7:90:bd:ba:68:57:
                    4c:d7:a8:98:d5:ce:ce:ea:25:d7:84:40:16:71:e5:
                    8d:32:8a:d4:be:d1:a0:2f:ce:6d:05:5a:ac:69:a3:
                    3d:69:20:11:f5:d0:71:d0:91:49:f6:a8:c0:3f:65:
                    ce:94:95:ac:17:12:84:a6:72:b5:c3:a9:d1:53:79:
                    b0:ca:a1:ae:e6:e5:b9:65:3b:8c:27:9b:ad:cb:0d:
                    0e:b5:af:4a:c1:28:9d:f1:ac:90:df:1e:e7:54:65:
                    fd:4a:da:cd:03:ab:c2:43:94:df:96:30:53:ab:77:
                    f5:57:2c:e9:e4:05:7f:75:27:19:22:e6:4f:3c:db:
                    bd:8e:07:f9:a4:79:88:d8:a9:10:d4:7a:4c:2f:c0:
                    ce:36:eb:d9:10:a3:3a:a3:69:1d:4b:ad:46:3e:8e:
                    d3:6e:a9:18:eb:80:f6:d7:37:17:f2:e9:50:81:a0:
                    fa:db:2f:bb:df:b3:60:8b:d5:28:c0:a8:72:43:bc:
                    8d:0e:05:9f:10:f3:b5:8d:d9:d7:9a:91:e6:f9:44:
                    16:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:40:E5:CE:62:72:FB:8F:33:84:5C:20:93:3B:8D:2F:6F:85:3A:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/08a7bded-2d5d-3c43-82c3-cf8cfc6bb171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.crl

            X509v3 Authority Key Identifier:
                keyid:4D:B5:2F:46:B2:3B:D1:0C:89:9E:88:83:77:12:B0:7E:2B:24:EA:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:16:70:f9:75:2d:5b:74:63:41:0d:56:d2:b1:39:e5:58:9f:
         19:ae:f4:c4:96:23:b2:c3:58:49:4e:b9:88:54:e1:03:2d:07:
         fb:47:ab:19:a0:bb:e7:17:81:07:a8:d1:b7:26:02:b5:71:11:
         dd:78:d6:30:5b:20:b9:47:e0:39:79:15:77:7c:01:27:93:4b:
         24:b7:cd:53:75:53:b3:d0:0f:59:57:47:82:3c:1f:9f:2f:f0:
         bf:ec:ca:ae:18:68:bf:7b:0a:a6:12:40:6e:93:9f:ee:78:bd:
         0e:a0:db:05:c2:22:7f:15:f7:c3:35:4f:16:43:68:de:4e:e6:
         75:63:a6:a9:da:31:0f:b6:b8:c6:05:66:3f:10:94:44:4c:b2:
         cf:4a:16:f4:d6:01:3a:59:b8:f0:96:9a:0a:7d:c4:8d:06:c5:
         18:8a:a2:aa:5b:a6:d0:b1:54:d0:2c:ab:33:75:7f:33:7f:8c:
         d2:b1:8d:4c:a3:ab:b0:6f:17:cc:13:cb:84:b0:ba:54:a7:be:
         b2:fa:1e:bb:2e:e7:62:a1:25:7f:78:bc:dc:fc:9c:9b:32:70:
         5c:88:f4:5d:30:5e:0a:fd:c9:1c:16:3f:68:d0:15:82:34:13:
         dc:9a:d5:42:ef:ed:d7:15:c1:9c:b9:74:31:02:ed:90:85:3d:
         dc:68:eb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:38:59 2025 by rpki-client